Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Medical Informatics Engineering Clear all filters
TI-2025-24559 CVE-2025-35029 · GHSA-vwxq-9j7w-7vmv

Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page

Priority LOW 21

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.0022 Published 2025-11-20 Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +2 CWE-79
TI-2025-24563 CVE-2025-35033 · GHSA-92rx-j4vp-fpr7

Medical Informatics Engineering Enterprise Health CSV injection

Priority LOW 28

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files.

CVSS 4.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00243 Published 2025-09-29 Fixed in RC202503 2025-03-14, RC202409 2025-03-14 +3 CWE-1236
TI-2025-24560 CVE-2025-35030 · GHSA-mvhr-jgx3-hrv3

Medical Informatics Engineering Enterprise Health cross site request forgery

Priority LOW 39

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on be…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00198 Published 2025-09-29 Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +3 CWE-352